Local Coding Agent v4.0.0

Local Coding Agent v4.0.0

V4 is the consolidated cross-platform release. It combines the complete v3
tool expansion with the v4 runtime, security, tunnel-authentication, tray-app,
and CI improvements.

Highlights

• 58 MCP tools for repository discovery, file editing, patching, command
  execution, process management, Git, skills, testing, review, planning,
  policies, approvals, and workspace profiles.
• Cross-platform runtime for Windows, macOS, and Linux, with native support
  for cmd, PowerShell, bash, sh, and zsh.
• Reliable process-tree cleanup using taskkill on Windows and POSIX
  process groups on macOS/Linux.
• Dashboard mini-IDE with workspace tree, read-only file viewer, Git diff,
  tool metrics, recent calls, and metrics reset.
• Windows tray app v4.0.0, targeting .NET 10 and provided below as a
  self-contained Windows x64 executable.

Repository intelligence and editing

• Repository profile, important-file discovery, repo map, symbol scan, and
  index freshness reporting.
• Patch preview and validation before writes.
• Automatic backup batches and undo_last_patch.
• Structured git_status and git_diff tools.
• Skill creation and deletion in addition to skill discovery/loading.

Test, review, and agent workflow

• Automatic test/build/lint command detection.
• Full and changed-test runners.
• Diff review, secret scanning, TODO scanning, and change summaries.
• Persistent task plans, task state, decision logs, policy controls, approval
  requests, and workspace profiles.
• A 20-scenario eval suite covering edits, undo, tests, path confinement,
  audit redaction, Git safety, repository mapping, checkpoints, planning,
  policies, and patch previews.

Security and tunnel hardening

• Canonical path confinement blocks symlink and junction escapes.
• Windows path checks are case-insensitive; POSIX checks remain case-sensitive.
• Unsafe raw-Git flags such as --output and -c are blocked in safe mode.
• Recursive audit redaction covers commands, patches, file contents, tokens,
  passwords, authorization headers, and nested secret-like fields.
• MCP_AUTH_TOKEN is forwarded through the tunnel using environment variables,
  without placing secrets in command-line arguments.
• The tray app now defaults to safe mode for new or empty configurations.
• AGENT_EXTRA_ROOTS_JSON provides unambiguous multi-root configuration.

CI and verification

• GitHub Actions runs on Windows, macOS, and Ubuntu.
• Windows tray publish gate using .NET 10.
• Local release verification completed:
  • MCP integration: 23/23 passed
  • Runtime security: 7/7 passed
  • Baseline security: 6/6 passed
  • Eval suite: 20/20 passed (100%)
  • npm audit: 0 vulnerabilities
  • Tray build: 0 warnings, 0 errors

Upgrade notes

• Building the tray app requires the .NET 10 SDK. The attached Windows x64
  executable is self-contained and does not require a separate .NET runtime.
• Keep AGENT_MODE=safe unless unrestricted command execution inside the
  configured roots is explicitly required.
• Restart both the MCP server and tunnel after upgrading, especially when
  MCP_AUTH_TOKEN is enabled.
• Port 8788 is reserved by the tunnel client; the dashboard defaults to
  8790.

---

Tóm tắt tiếng Việt

V4.0.0 hợp nhất toàn bộ nhóm tool v3 với runtime và bảo mật v4: tổng cộng 58
MCP tool, chạy trên Windows/macOS/Linux, có patch preview + undo, test/build/
lint runner, review và secret scan, planner/policy/profile, dashboard mini-IDE,
chặn symlink/junction escape, audit redaction đệ quy, truyền bearer token qua
tunnel an toàn và CI đa hệ điều hành.

File tray Windows x64 đính kèm là bản self-contained v4.0.0. Người dùng chỉ cần
.NET 10 SDK khi tự build từ source.